Abhishek Shah

Location: Youngstown, Ohio

Sr. Network Engineer

Summary:
 8 + years Extensive hands-on experience in Cisco network design, deployment and troubleshooting.
 Worked on Cisco 6500, 7200VXR, 12000 series Router and Cisco 4500, 6509, 7613 series switch.
 Proficiency in configuration of VLAN setup on various Cisco Routers and Switches.
 Experienced in trouble-shooting both connectivity issues and hardware problems on Cisco based networks
 Expert in Palo Alto Networks Certified Network Security Engineer, Fortinet Network Security Expert and Network Virtualization with
impressive track record in handling high-end Data Center & ability to install, configure, secure and administer networking projects per-
taining to network management for some of the reputed entities in the region.
 Strong working knowledge in complex configurations, troubleshooting network connectivity and Cisco IOS version integration issues.
 Successful in resolving Routing, Switching and WAN connectivity escalation issues using various ticketing tools
 Expertise in configuring RIP, IGRP, EIGRP, OSPF, BGP and MPLS protocols.
 Experience in Deploying and decommissioning Cisco switches, Cisco Meraki Products and their respective software upgrades.
 Hands-on experience of various layer 2 transport protocols including ATM & Frame Relay and MPLS, 2547bis VPN, RFC 4364,
mVPN, VPLS.
 Cisco ACI (Application Centric Infrastructure) deployed, monitored, and managed in a way that benefits different teams in the IT or-
ganization including SDN Network, Cloud and and Security.
 Experience with F5 load balancers and Cisco load balancers (CSM, ACE and GSS).
 Manage implementation complex LB design server farms, firewalls, IDP & IPS devices using Cisco ACE
 Design and implement an SDWAN solution for a medium sized company maintaining 468 locations throughout the United States.
 Worked on Load Balancer F5 LTM, GTM series like 6400, 6800, 8800 for the corporate applications and their availability.
 Experience working with Nexus 9504, 7010, 5548, 5596, 2148, 2248 devices.
 Experience as a Data Network & Security Engineer with expertise in design, development, implementation, troubleshooting and main-
tenance of Network & security environments with mixed vendors Routers, Switches Firewalls, Proxy, VPN's, IPsec, NAT, Load Balan-
cer's, and Nexus Switches.
 Experience in configuring and Troubleshooting BIG-IP F5 load balancer LTM, GTM, APM, ASM.
 Expertise in design, configuring, supporting and administrating Data Centers, Cisco routers, switches, Nexus switches, Load balancers
(F5) and firewalls.
 Strong hands on experiences Cisco Routers 4300, 4400, 4500, 2900, 3800, Switches 3850, 4500, 9300, 9400, 9500, 6500, 6800 series.
 Experience in layer - 3 Routing and layer-2 Switching. Dealt with Nexus models like 5K, 2K series, Cisco router models like 12k, 10k,
7200, 3800, 3600, 2800, 2600, 2500, 1800 series, Cisco catalyst 6500, 4500, 3750, 3500, 2900 series switches and Aruba router model
switches like Aruba 3810M.
 Possess hands-on experience with Cisco VPN Concentrators, F5 Fire pass SSL VPN, 6509 Core Datacenter designs.
 Experience on Cisco 7600, Cisco 6500, Cisco 4503, Cisco 3750, Cisco ASA, Juniper NSM, Juniper ISG1000, Juniper IDP and Blue-
coat SG cashing and web filtering
 Experience with deployment of Palo Alto firewalls for different NAT, video conferencing traffic. Performing administrative tasks
with Palo Alto Networks (Panorama) including Security, NAT policy.
 Configured and maintained Palo Alto Network firewalls.
 Working Knowledge and demonstrated experience on the Cisco Juniper, HP Aruba, Avaya, and Arista switches & Routers.
 Network Security administration & management of devices: Juniper NSM IDP & Tipping Point IPS.
 Experience with Firewall migrations from PIX firewall to Cisco ASA and Juniper SRX firewall appliances.
 Possess good experience in configuring and troubleshooting WAN technologies like MPLS, T1, T3, DS3 and ISDN.
 Proxy Services - Zscaler, Blue Coat Proxy.
 Proficient in configuring WLAN, VLAN, VLAN Trunking Protocol (VTP), Dynamic Trunking Protocol (DTP), Spanning Tree Pro-
tocol (STP), RSTP, and PVST.
 Expertise in installing, configuring and troubleshooting Juniper Routers (MX-480, MX960) and Juniper EX Switches (EX2200,
EX2500, EX3200, EX4200, EX4500, EX8200) series.
 Experience with design and implementation of Virtual Switching System (VSS) for both User segment and server segment using 6509
catalyst switches.

Technical Skills:
Protocols: RIP, RIP V2, EIGRP, OSPF, IS-IS, IGRP, HSRP, VRRP, GLBP, LACP, PAGP, DNS, SMTP, SNMP, FTP, TFTP, LPD/
TDP, WLAN, WEP, POP3 LADP.
LAN Technologies Workgroup: Domain, HSRP, DHCP, Static, VLAN, STP, VTP, Ether Channel, Trunks.
WAN Technologies Leased Line: Frame Relay, ISDN, PPP, HDLC, ATM, SONET, And Metro Ethernet.
CISCO Routers: 1700, 1800, 2500, 2600, 2800. CISCO High End Router 3600, 3800, 7200, 12010.
CISCO Switches: 1900, 2950, 2960. CISCO Campus switches 3550XL, 3548, 4984 Core Catalyst 4503, 4507 RE, Catalyst F5 load bal-
ancer, Juniper ISG/SRX.
Security & VPN: PIX 500 Firewall, ASA 5505 Firewall, AIP SSM, CSC SSM, FWSM, Fort iGATE, CISCO CSM, ACL- Access Con-
trol List, IPS/IDS, NAT, PAT, CISCO ACS, Check point, pfSense, Palo Alto.
Layer 2 technology: VLAN, VTP, VMPS, ISL, dot1q, DTP, Spanning-tree, PVST
Layer 3 Switching: CEF, MLS, Ether Channel
CISCO ISE: Cisco Integrated Services Engine (ISE) 2.3
AAA Architecture: TACACS+, RADIUS, Cisco ACS.
Monitoring Tools: Wireshark, Nmap, Nessus, OpManager, PRTG Packet Sniffer, Juniper NSM, Junos Space, Riverbed, Netscout. GT-
MVOIT
Servers: Domain servers, DNS servers, WINS servers, Mail servers, Proxy Servers, Print Servers, Application servers, FTP servers,
NTP.
Operating Systems: Windows NT 4.0 (Desktop/Server), Windows server, Windows XP/7, Solaris, Red Hat, UNIX.
Security / Firewalls: Cisco ASA Firewalls, IPSEC & SSL VPNs, IPS/IDS, DMZ Setup, Cisco NAC, ACL, IOS Firewall features,
checkpoint.
Juniper: EX-2200, EX-4200, EX-4500, MX-480, M Series, SRX210, SRX240.
Hardware: Cisco Cat Switches, Routers, Avaya VoIP phones, Cisco IP 796X/794X.

Education:
Bachelor of Science in Computer Science l 2016

Professional Experience:
Sr. Network Engineer l Dec 2020 - Present
Avanade Inc. (Remote)
Responsibilities:
 Installation, configuration and maintenance of Palo Alto Firewalls, Cisco ASA firewalls.
 Deployed and managed Varonis specifically Data Governance, Data Advantage and Data Alert modules in complex environments.
 Demonstrate the features and benefits of various software to the staff and documented the operations.
 Used Varonis Data advantage and Data Alert to monitor and analyze and alert file system activities on NAS.
 Experience with converting Cisco ACE load balancer to F5 LTM load Balancer in data center environment.
 Possess a good experience working with the Trouble Tickets on F5 Load balancers, including Cisco CSS, Brocade ADX and both F5
LTM and GTM products.
 Worked on ACE load balancers. Experience with F5 load balancers - LTM, GTM series like 6400, 6800, 8800 for the corporate applic-
ations and their availability.
 Switch experience includes Cisco Catalyst switches: CISCO 3750, 4500, 6500 series switches and Cisco Nexus switches 7000 and
7700 series.
 Troubleshoot and hands on experience on security related issues on Cisco ASA/PIX, Checkpoint, IDS/IPS, Palo Alto and Juniper Net
screen firewalls.
 Onboarding and Certifying new F5 device to replace End of Support, End of Life legacy F5 appliances
 Experienced in managing, monitoring and configuration of wireless on Aruba Air wave and Cisco Prime.
 Fortinet Firewall administration, configuration of FortiGate 3000, 3815 series as per network diagram.
 Managing and Support Cisco, Fortinet, Checkpoint/Kemp routers and switches, LB, Foundry, and firewalls
 Implementation of Palo Alto, Fortinet, and SonicWALL firewalls.
 Designing, developing and implementing computer network infrastructure utilizing network protocols such as BGP, HSRP and OSPF
on core routers, configuring MPLS core routers, layer 3 routers, and layer 3 devices for network connectivity.
 Configuring OSPF, BGP on the ASA and Palo Alto Firewalls and run firewall reports and queries.
 Configuration and maintenance of Juniper Net Screen SSG-550.
 Configured DNS and Confidential for servers using InfloBox.
 Configured Routers for OSPF, EIGRP, BGP protocols.
 Upgrade and maintenance of all production Juniper, Cisco and Palo Alto network devices.
 Network Deployment of MPLS Cloud - Designed, constructed, implemented, tested and launched various network nodes featuring
BGP, OSPF, MPLS and VLANS using RSTP, gateway redundancy protocols HSRP, GLBP and VRRP.
 Working with QIP, Confidential and DNS with BGP, OSPF, EIGRP and MPLS experience help Build Data Centers.
 Used Infoblox for DNS management of network infrastructure.
 Implemented and Tested desktop virtualization and introduced VMware View to the client.
 Configuration and maintenance of OSPF protocol which was the enterprise IGP. Configuration included deploying of new branch loca-
tions or new network devices in the existing infrastructure. Creating Stub Areas & configuring Summarization for effective Routing.
 Using PBR with Route Maps for route manipulation/filtering. Troubleshooting routing issues like suboptimal routing and asymmetric
routing.
 Responsible team member to troubleshoot the problems from indoor 802.11n Access Point Cisco AirNet 600, 1600, 2600 and
5500/2504 wireless controller series.
 Provided technical support for full setup, debugged the problems of OSPF, switching and HSRP.
 Switching related tasks included implementing VLANs, VTP and configuring and maintaining multi VLAN environment and inter-
VLAN routing on Fast-Ethernet channel.
 Setup and maintain DNS servers. Configuring and maintaining virtual server environment using VMWARE ESX, VCenter vSphere.
 Worked on OSPF and implemented successful migration from OSPF to EIGRP for internal routing.
 Configured Object Grouping, Protocol Handling and Code up gradation on Palo Alto Firewalls.
 Conducted vulnerability assessments and generic security scans of both systems and networks to identify and mitigate security vulner-
abilities using Nessus Vulnerability Scanner.
 Configured and monitored Firewall logging, DMZ’s and related security policies.
 Responsible for service request tickets generated by the ServiceNow ticketing system in all phases such as troubleshooting, mainten-
ance, upgrades, patches, fixes, and all around technical support.
 Configuration of ACLs in Cisco 5540 series ASA firewall for Internet Access requests for servers in LAN and DMZ and also for spe-
cial user requests as authorized by management.

Network Engineer l April 2018 – Nov 2020

Northwestern Health, NY
Responsibilities:
 Deploying, designing, configuring, maintaining, and fixing most of the network security implementations of Palo Alto and Checkpoint
Firewall.
 Troubleshooting of CISCO routers like ping, trace route and basic issues.
 Ensure connectivity and communication among networks, servers and clients inside and outside department.
 Experience on Data/Voice cabling services (Cat5,Cat5e, Cat6, Fiber).
 Virtualization of network using Vmware.
 Worked and responsible for managing VPN systems for site-to-site and remote access.
 Designed security policies on Palo Alto network firewall for controlling what traffic needs to be allowed or blocked based on customer
requirements.
 Configured and troubleshoot OSPF and EIGRP.
 Monitoring the performance of the network devices. Performing Troubleshooting and observing directing conventions such as OSPF,
EIGRP & BGP.
 Serve as part of a team of network engineers responsible for base wide network upgrade from Cisco Layer3 switches to Juniper Layer
3 EX4300 & EX3300 switches.
 Involved in Configuring, Monitoring and Troubleshooting Juniper security appliance & configuring VLANs/routing with the firewalls
as per the design.
 Configuring VLAN, Spanning tree, VSTP, SNMP on Juniper EX series switches.
 Manage operational monitoring of equipment capacity/utilization and evaluate the need for upgrades; develop methods for gathering
data needed to monitor hardware, software, and communications network performance.
 Troubleshooting on IP, TCP, PPP, EIGRP, OSPF, BGP, MPLS (L2 & L3 VPN), STP, VRRP, VLAN
 Ensure reliability, stability and recoverable of specific server environments.
 WAN Infrastructure running OSPF & BGP as core routing protocol.
 Tested authentication in OSPF and BGP.
 Security policy review and configuration in Palo Alto and Junipers Firewall in US offices and Datacenter.Designed and configured of
OSPF, BGP on Juniper Routers and SRX Firewalls.
 Troubleshooting Riverbed Issues and settings.
 Managed VMware, Windows Server 2008, Active Directory and Microsoft's SMS 2008.
 Configured and optimization settings of Riverbed
 Normally primary focus involves server hardware associated operating systems and general responsibilities, backup strategies. Install
and upgrade operating system software configuration and optimize storage systems.
 Installed and configured Cisco ASA 5500 series firewall and configured remote access IPSEC VPN on Cisco ASA 5500 series.
 Planning and configuring the routing protocols such as OSPF, RIP, and Static Routing on the routers.
 Installation & configuration of Cisco VPN concentrator 3060 for VPN tunnel with Cisco VPN hardware & software client and PIX
firewall.
 Planned and designed the organization's LAN network expansion. Upgraded and configured Microsoft Window server and installed
network routers, cabling and Firewall
 Developing and implementing policy to ensure the integrity, protection and availability to authorized persons of department data and
hardware, software and other components which are required for processing data.
 Responsible for evaluating impact and performance on the network server.
 Managing Layer 2 switches of Cisco, VLAN configuration and assigning ports to specific VLAN as per requirement.
 Monitor and tune network to ensure acceptable levels of performance.
 Responsible for Internal and external accounts and, managing LAN/WAN and checking for Security
 Evaluate applications connectivity requirements.
 Configuring various clients like Outlook Express, MS-Outlook 2003 & 2007

LAN/WAN Network Engineer l Oct 2017 – March 2018

Costco Retail, Issaquah, WA
Responsibilities:
 Member of a team responsible for onsite LAN/WAN support deployment and configurations of routers, switches, wireless, voice, fire-
walls and related LAN/WAN technologies.
 Technical responsibilities include but not limited to onsite LAN/WAN support deployment and configurations of routers, switches,
wireless, voice, firewalls and related LAN/WAN technologies.
 Proficiency in Cisco Router 2621; Cisco 891, 1841, 2801, 2851 Integrated Services Router; Cisco Catalyst Switches 3500, 3550, 4500;
Cisco ASA 5505, 5510; Cisco Nexus 1k, 2k, 5k; Juniper EX2200-C Switch; F5 Big IP Version 11.6.0; Cisco Unified Communications
Manager Express Version 8.6; Cisco Unity Express Versions 7.0.6; Cisco 2106 Wireless LAN Controller; Cisco Aironet 11x Access
Point; Palo Alto PA-2020 Firewall, Nagios, Solar Winds Orion, Cacti, Wireshark.

Jr. Network Administrator l Jan 2015- Jul 2017

Balaji Enterprises Kathmandu, Nepal
Responsibilities:
 Contacted customers via phone, instant messenger, or email for issue resolution
 Hands-on desktop building, formatting, re-image and deployment using Veeam Backup.
 Worked on Buffalo NAS, SAN, Load Balancing.
 Worked on SonicWALL and Cisco ASA Firewall.
 TCP/IP networking protocol, Routers and Proxy, Office 365.
 Maintained DNS, IIS, MSSQL, routing, switching, firewalls, LAN/WAN.
 Worked on Network Monitoring(SolarWinds)